Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/mK9ZGFT5MRus9cd9-ZHukBxXa70.roa
File: mK9ZGFT5MRus9cd9-ZHukBxXa70.roa (raw, json)
Hash identifier: bC9fcVsfywX7XSxHtFk/otbdEOU3pNXnqoILIEhH/LY=
Subject key identifier: 98:AF:59:18:54:F9:31:1B:AC:F5:C7:7D:F9:91:EE:90:1C:57:6B:BD
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01941FFA53DD0FC95F2751CE50BCD358E05E
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/mK9ZGFT5MRus9cd9-ZHukBxXa70.roa
Signing time: Wed 01 Jan 2025 03:48:06 +0000
ROA not before: Wed 01 Jan 2025 03:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35534
IP address blocks: 178.175.160.0/23 maxlen: 24
178.175.162.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:53:dd:0f:c9:5f:27:51:ce:50:bc:d3:58:e0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98af591854f9311bacf5c77df991ee901c576bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:b7:40:19:4c:df:af:ee:eb:e8:30:ea:b4:
30:54:b7:e9:b8:85:13:28:b0:64:1d:83:64:89:4a:
5e:f8:aa:dc:a0:f9:b4:1c:c6:74:f6:6d:eb:34:aa:
8c:61:73:87:a3:5c:b2:a0:39:e1:98:ec:42:80:68:
2f:16:e3:80:55:14:68:92:bc:12:03:5d:34:ea:96:
4f:77:32:02:86:93:f2:ab:ff:da:94:2b:e5:4c:61:
c9:cf:d4:e8:0b:8a:f6:24:c5:60:2b:1b:0e:e9:eb:
ca:d6:33:1b:e8:30:7f:5b:5a:18:50:46:ac:8c:f8:
47:75:43:b0:7e:50:74:8d:b8:ed:00:cf:97:3c:70:
e7:e2:cc:e8:14:8c:e8:90:11:bb:98:ca:59:a4:34:
b0:15:4b:6d:54:13:b2:f8:0a:c8:f6:df:c3:f3:54:
cf:32:17:f4:f5:3e:f8:4c:48:aa:81:3d:7b:1a:ce:
56:0e:71:7c:5d:9f:f0:35:89:80:cb:1f:a4:19:05:
c2:7b:78:b6:92:ac:58:79:30:95:31:3e:c3:33:19:
ce:cd:e7:03:d8:fe:8d:f1:b0:f9:a8:8b:eb:d7:87:
35:32:71:86:90:2b:53:d0:c0:d3:14:47:eb:6c:62:
d7:d2:76:60:da:04:86:0d:96:8e:2c:cf:34:56:af:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AF:59:18:54:F9:31:1B:AC:F5:C7:7D:F9:91:EE:90:1C:57:6B:BD
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/mK9ZGFT5MRus9cd9-ZHukBxXa70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.160.0/22
Signature Algorithm: sha256WithRSAEncryption
43:0d:57:be:1e:26:1e:b4:32:1b:c7:ed:38:ad:ed:47:6c:ee:
05:1d:db:9d:f5:30:88:e4:4a:ea:14:9f:41:8a:fd:4c:7a:ac:
f3:2a:39:2b:7d:a6:db:4a:0d:fa:90:08:de:57:ca:25:7a:32:
f8:a8:a8:0c:12:39:99:c3:6e:00:f4:30:49:d5:b9:0c:d0:50:
a7:6c:b1:2d:00:29:9a:05:eb:64:04:53:cc:c2:99:1e:d1:a0:
e3:d1:3d:1d:ad:8f:90:9b:fc:b3:56:16:5b:32:1a:b3:83:6d:
0a:63:86:7a:9a:3e:12:db:db:dd:63:24:68:af:3f:43:f4:bb:
7d:2a:ac:a5:30:ce:e4:10:ae:92:ad:93:70:2c:bb:3f:ce:f2:
fd:56:ef:94:d3:fe:90:a7:08:7e:73:b7:b8:dd:46:55:4a:37:
54:3c:62:85:76:99:3c:ff:93:cd:25:9a:92:60:dd:1a:15:89:
a4:cf:7c:d7:ba:14:fb:85:ac:12:98:ec:bc:19:77:7e:1e:14:
0e:79:1a:d6:0a:37:b9:33:ad:27:d5:36:e9:60:13:6e:20:08:
24:4b:5c:55:37:88:54:37:17:ff:cf:fc:11:17:50:2e:e4:56:
87:a7:5a:94:d4:6f:f6:65:9f:e7:49:52:ba:e6:30:2d:45:d6:
07:c6:3f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:38 2025 by rpki-client